Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.mft
File:                     BD46799FC26755B5FFA78DFAD006BB5A29320A6D.mft (raw, json)
Hash identifier:          KkaH4v2MAY2c7fcTee9ewqLJeb616lV7cT5/XwCWwF8=
Subject key identifier:   A5:A9:A1:7D:B9:90:9B:FF:89:FB:7B:BE:11:10:BF:43:FE:56:47:C5
Authority key identifier: BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D
Certificate issuer:       /CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
Certificate serial:       042B607201EE85481E5A157A47251227D4BDD70B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.mft
Manifest number:          F7
Signing time:             Tue 04 Nov 2025 15:14:04 +0000
Manifest this update:     Tue 04 Nov 2025 15:09:04 +0000
Manifest next update:     Wed 05 Nov 2025 18:59:04 +0000
Files and hashes:         1: 323830343a316365303a3a2f33322d3332203d3e203631363830.roa (hash: pmTdc0aeUkYV3p4lAkD339q89Fyr+jMFFgpAlxazPcE=)
                          2: 3133312e3130382e36342e302f32322d3232203d3e203631363830.roa (hash: vy49q93RBVKgp7iU+lbqtnRLjFbU01wPiSGuNmHyrHg=)
                          3: 3133312e3130382e36352e302f32342d3234203d3e203631363830.roa (hash: BWLCsjikx7/6G3MjmUDQ5FWbsh0yaU878d5wKGK5pk8=)
                          4: 3133312e3130382e36372e302f32342d3234203d3e203631363830.roa (hash: yrxbU0EzyLgoksOkqvM3A8eoEfVOXWD9Nl4YkxI1D4c=)
                          5: 3133312e3130382e36362e302f32342d3234203d3e203631363830.roa (hash: voTedKIG37FOFLaqm6fGmpFCZvrCf87+R7MSaW7j1gQ=)
                          6: 3133312e3130382e36342e302f32342d3234203d3e203631363830.roa (hash: XM9Yn/UBYBCTD1DSvd8wPKTqFRAcQT/obwzYOwIO0YM=)
                          7: BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl (hash: Te3BcQUF8WWLw7o0MaHJt/Tlu7wbfkxOvGmHnZXxOMM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 18:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2b:60:72:01:ee:85:48:1e:5a:15:7a:47:25:12:27:d4:bd:d7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
        Validity
            Not Before: Nov  4 15:09:04 2025 GMT
            Not After : Nov  5 18:59:04 2025 GMT
        Subject: CN=A5A9A17DB9909BFF89FB7BBE1110BF43FE5647C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:c9:6b:89:5e:4f:98:12:a3:9a:c5:c8:95:
                    85:85:e3:67:37:5f:69:67:08:a9:5a:dc:91:e0:f5:
                    9a:fd:67:dd:76:ec:f7:46:fa:70:c0:eb:d1:72:d2:
                    dd:a1:da:db:4d:d8:9b:62:7c:4f:9a:25:66:62:76:
                    ac:b2:d9:70:31:68:5b:90:11:f6:02:0b:49:88:7f:
                    df:a1:ca:1b:be:45:88:1c:0d:49:d0:1e:56:a6:b4:
                    51:9b:6b:85:e1:88:3b:6c:7b:32:63:28:40:65:29:
                    1e:26:16:04:c3:83:b1:fd:d7:ba:f1:1c:f7:a7:2b:
                    1c:34:46:c0:08:bf:d1:a0:b2:af:ab:aa:c2:6f:22:
                    87:61:c8:2c:7e:38:07:27:0c:da:c7:38:4a:ae:e2:
                    b8:dd:4e:53:83:72:3e:5f:53:b2:4f:00:bf:a6:e4:
                    fe:0d:e9:6b:23:98:d1:e1:a8:c1:cb:bc:0e:5c:fb:
                    74:d4:ed:23:bf:b8:17:a4:58:8e:02:2e:ef:c0:ee:
                    67:ee:22:4b:9f:69:6c:db:3c:81:da:b9:28:3a:41:
                    4b:25:ae:d0:ed:78:d0:cb:4f:42:4b:17:ed:20:ba:
                    99:fe:41:bb:08:58:2d:ca:38:db:06:b0:38:fb:9f:
                    18:dd:ad:0b:1a:4a:51:5a:6b:1e:6d:95:49:0c:7b:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A9:A1:7D:B9:90:9B:FF:89:FB:7B:BE:11:10:BF:43:FE:56:47:C5
            X509v3 Authority Key Identifier:
                keyid:BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:36:3b:b0:4a:75:f3:97:43:a2:f2:eb:e8:4f:6d:5a:75:27:
         d0:96:7d:d0:8c:5c:9f:34:8a:ca:5d:c8:42:7c:5b:14:3e:4b:
         99:ab:02:0e:d5:d7:d2:89:1d:70:95:bf:a0:9e:65:48:8d:2f:
         77:8e:88:61:88:8f:6d:8b:dc:cd:63:c3:5c:d5:6b:58:07:87:
         5d:a4:e4:46:b4:72:19:27:f8:c9:c8:5e:be:4a:ef:36:89:ba:
         f1:81:8c:6e:15:fe:92:21:f3:a0:2b:a5:d9:2b:bf:61:98:fd:
         e2:af:d3:80:db:d6:68:e4:28:f6:48:5b:37:0e:c1:71:e4:6a:
         03:df:56:26:e4:26:99:6b:94:3b:e4:80:02:6a:df:b4:cb:7a:
         ed:9f:0a:c2:46:7a:4e:49:da:77:e6:eb:ac:1e:4e:e1:12:aa:
         e7:61:1e:66:78:5e:e2:f5:5f:df:61:e7:66:bb:42:ab:22:a2:
         96:c9:45:86:90:65:55:20:75:d3:90:84:a8:37:ec:0c:6c:54:
         4f:56:15:d7:46:10:8a:ea:21:09:5e:eb:39:03:86:db:eb:c4:
         e4:fe:79:66:79:61:9b:cb:7c:5d:94:6a:22:5b:cc:57:ed:0a:
         57:32:84:bb:02:1f:84:2e:d7:0f:99:0b:da:20:d5:38:99:10:
         12:dc:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:00:38 2025 by rpki-client